Archive
16 December 2022
Vulnerabilities first published on this day (UTC), newest first.
106 results · Clear filters · Feed
-
Medium 6.7
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could le…
-
Medium 4.4
In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation. This could l…
-
Medium 6.7
In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could …
-
Medium 5.5
In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. This could lead t…
-
Medium 4.4
In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 5.5
In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 6.7
In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to lo…
-
Medium 4.2
In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Medium 4.4
In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds c…
-
Medium 6.7
In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds che…
-
Medium 6.7
In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This …
-
Medium 6.7
In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.…
-
Medium 6.7
In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure. This could lead to local escala…
-
Medium 6.7
In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This c…
-
Medium 4.9
In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missin…
-
Medium 5.5
In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input val…
-
Medium 5.5
In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injectio…
-
Medium 6.7
In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This…
-
Medium 5.5
In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds ch…
-
Medium 5.5
In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the …
-
Medium 5.5
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Medium 5.5
In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Medium 6.7
In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to l…
-
Medium 4.4
In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. T…
-
Medium 6.7
In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corru…
-
Medium 4.4
In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a …